Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944fec44-d910-3320-8d63-d26efb7edaf1.roa
File: 944fec44-d910-3320-8d63-d26efb7edaf1.roa (raw, json)
Hash identifier: rJjSZPt78KIm5I1aQzWvhydlvsnhIiKHDG042kZHx48=
Subject key identifier: CD:6E:53:7C:45:3D:78:30:CA:37:5B:85:D0:CE:7D:C9:5A:0F:0B:94
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840733BFC53A6F029F78AFAEC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944fec44-d910-3320-8d63-d26efb7edaf1.roa
Signing time: Mon 02 Jan 2023 12:00:00 +0000
ROA not before: Mon 02 Jan 2023 12:00:00 +0000
ROA not after: Tue 07 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 136.11.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:73:3b:fc:53:a6:f0:29:f7:8a:fa:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 2 12:00:00 2023 GMT
Not After : Feb 7 05:00:00 2023 GMT
Subject: CN=3f26eb23-7781-435f-a0e6-50b470fc8d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a8:9d:37:60:c0:37:3e:4c:66:e1:2f:65:91:
7f:82:fc:8a:b7:85:6c:df:9a:bc:1a:4e:bc:b1:1e:
3c:67:63:fc:6b:db:c9:c8:00:ed:bf:72:da:ae:c4:
96:b7:b3:30:f8:d7:53:e5:3a:d0:1f:e4:6b:05:aa:
c1:0b:28:6c:13:ec:80:2d:11:16:45:53:59:c7:6e:
c7:85:bb:5e:20:bb:5d:b4:64:fa:73:2b:35:73:31:
d0:03:04:e6:ca:5c:11:45:d2:d2:56:e3:f8:ce:0a:
12:88:38:a3:19:07:fb:76:ef:9c:20:bd:a2:6a:88:
88:65:0f:23:49:86:30:0d:9f:5b:8b:9e:77:1b:af:
be:95:40:40:1e:ee:43:8c:5a:8c:d5:72:15:10:2a:
36:f4:39:22:06:17:15:af:45:f0:f7:71:07:20:88:
d9:88:41:f8:5f:2a:5c:93:e4:25:7c:8f:0a:00:24:
e5:b4:0b:71:83:14:fa:00:6e:34:48:c7:0f:db:30:
f7:8f:c5:70:38:fd:46:67:89:d8:5c:66:d4:20:e9:
3e:5d:31:92:a8:1a:6c:76:5d:ba:ce:bb:4d:b2:a0:
72:b5:ae:25:d2:c8:ed:ec:cd:d9:a5:5f:85:34:f5:
46:fb:1e:47:9f:98:af:d4:f5:e4:5f:eb:2b:2f:a0:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6E:53:7C:45:3D:78:30:CA:37:5B:85:D0:CE:7D:C9:5A:0F:0B:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944fec44-d910-3320-8d63-d26efb7edaf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
136.11.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:99:04:db:19:be:67:b3:06:cb:e3:ee:00:94:47:59:fd:0c:
ef:91:7b:96:8c:2a:63:9a:d6:2b:c2:e0:02:08:0b:60:c4:6b:
fd:27:e9:52:fb:7a:58:ba:d1:d3:65:e7:1c:0e:45:6e:f0:87:
5e:67:43:7f:53:a4:d9:46:6d:85:31:f4:af:3f:9f:63:dc:12:
0f:54:3c:03:44:6d:dd:42:1e:ee:03:f9:4c:6a:7f:2d:95:b2:
b7:d6:15:6b:f7:ee:22:52:f1:ab:3b:56:b5:23:42:1f:cd:a6:
49:78:1d:68:54:e7:b9:c2:ed:55:80:5c:2e:a8:fd:8a:d0:08:
d9:73:42:5d:b6:3b:4f:30:77:99:b4:79:d1:53:ee:6a:a0:4e:
31:d2:a5:20:89:4e:ec:af:68:03:7c:46:19:21:9c:29:14:47:
c4:36:be:42:9f:99:b0:8a:d7:5e:69:b5:f3:dc:65:3e:47:04:
83:72:13:5a:b2:bd:cd:47:c1:ce:10:0f:b4:ed:45:da:f3:92:
3c:92:67:b9:9b:ad:34:14:28:c8:1d:aa:a6:a2:20:30:2f:6d:
24:52:f7:5e:2a:6a:66:17:cf:b2:05:38:93:6d:b9:fb:c7:02:
ef:78:d4:f9:cc:51:17:fe:5c:a6:fb:a2:06:7b:b0:a4:40:42:
f8:f4:52:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:41 2025 by rpki-client